security-review
MANDATORY for security-sensitive code changes - OWASP-based security review with dedicated checklist, required before PR for auth, input handling, API,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
Security & auditing
7,230 results
ctf-crypto
CTF cryptography attack techniques. Used for CTF encryption challenges such as RSA/AES/ECC/lattice cryptography/PRNG/ZKP/classical ciphers. Use when encountering encrypted data that needs to be cracked, cryptography-related CTF problems, needing to analyze weaknesses in encryption algorithms, or identifying ciphertext/public keys/cryptographic parameters. Covers comprehensive cryptography attack and defense techniques from classical substitution ciphers to modern public-key cryptography, elliptic curves, lattice attacks, zero-knowledge proofs, and more
log-analysis
Analyzes system and application logs to detect anomalies and security threats in blue-team operations.
siem
Monitors and analyzes security events and logs for real-time threat detection and incident response.
bitrix-framework
Canon for any 1C-Bitrix / Bitrix24 PHP task — /local only, D7 first, DI boundaries, security defaults, version policy and Since markers. Use at the start of…
git-expert
Git expert with deep knowledge of merge conflicts, branching strategies, repository recovery, performance optimization, and security patterns. Use PROACTIVELY…
workerd-safety-review
Memory safety, thread safety, concurrency, and critical detection patterns for workerd code review. Covers V8/KJ boundary hazards, lifetime management,…
adversarial-machine-learning
Guide for adversarial machine learning: adversarial examples, data poisoning, model backdoors, and evasion attacks.
llvm-security
Expertise in LLVM security features including sanitizers, hardening techniques, exploit mitigations, and secure compilation. Use this skill when implementing…
huawei-cloud-cts-trace-management
Huawei Cloud CTS (Cloud Trace Service / Cloud Audit Service) management and audit analysis via the hcloud CLI. Covers tracker lifecycle (list/create/delete), audit trace…
security-review
Review code for security issues before merge — authz gaps, injection, secrets, unsafe defaults, SSRF, path traversal. Use when reviewing a PR, auditing a diff,…
dependency-vulnerability-checker
Validate dependency vulnerability checker operations. Auto-activating skill for Security Fundamentals. Triggers on: dependency vulnerability checker,…
forensics-data-collector
Process forensics data collector operations. Auto-activating skill for Security Advanced. Triggers on: forensics data collector, forensics data collector Part…
implementing-pam-for-database-access
Deploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL, covering session proxy configuration, credential…
implementing-vulnerability-management-with-greenbone
Deploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library over the Greenbone Management Protocol (GMP) to connect via Unix…
recovering-from-ransomware-attack
Executes structured ransomware incident recovery following NIST/CISA frameworks: environment isolation, forensic evidence preservation, clean infrastructure…
variant-analysis
Discover vulnerability variants by identifying similar code patterns across a codebase using CodeQL and Semgrep pattern matching, finding instances where a…
nanoclaw-traffic-guardian
NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.
disk-forensics
Analyze disk images and file systems for forensic investigation. Use when investigating data theft, insider threats, malware persistence, deleted file…
offensive-netexec
Use this skill whenever the user asks about NetExec (nxc) — a network exploitation and post-exploitation tool for Active Directory environments. Triggers…
Geek-skills-security-audit
Comprehensive code security inspection and server security audit skill. Applicable to: (1) Code vulnerability scanning - detecting OWASP Top 10 vulnerabilities such as SQL injection, XSS, SSRF, (2) Dependency security checks - identifying outdated or vulnerable third-party libraries (such as React2Shell CVE-2025-55182, Next.js CVE-2025-66478), (3)…
telnyx-verify-javascript
Look up phone number information (carrier, type, caller name) and verify users via SMS/voice OTP. Use for phone verification and data enrichment. This skill…
tinyship-auth
Configure authentication providers for TinyShip: Google OAuth, GitHub OAuth, WeChat login, SMS OTP, and email/password with verification. Use when the user…
reversing-unity-il2cpp
Reverse engineer Unity games and apps built with IL2CPP or Mono, using Il2CppDumper, Il2CppInspector, and dnSpy. Use when an APK or IPA contains…